Thank you for your reply Dinesh! I did try to add the encryption parameter and DH group to both sides. it seems "hash sha" might be a default because it doesn't show up in the configuration after I enter it.
I have been doing a lot of research and spoken to a few cisco resources who I know. Haven't had much success.
The error I get is "No peer struct to get peer description" which from everything I read relates to the access-list being wrong. In this case, access-list 175...which appears to be correct to me.
I did a test and added "access-list 175 permit ip any any" to both sides as I read someone having a similar issue tried and amazingly enough, the session started up and I was able to ping across it. Unfortunately I lost internet connectivity on both ends at the same time. This seemed like a hack anyway, but I thought it was worth mentioning.
As I am still working on this issue, I'm reading about making a tunnel. Maybe I need to go that route? Basically, I need the satellite office to be able to access the fileserver in the main office as well as use another piece of software that connects back to our SQL server. Both sides need to use their own internet connections for all other activity.
The following is the configurations from both routers. I appreciate any insight you might have to offer. Maybe I'm going about this wrong. As a last note, I'm using ADVSECURITY-K9 ios on both ends if I haven't mentioned that previously.
Thanks!
--
Router 1 - Main Office
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 5
crypto isakmp key vpnkey address [router 2 public ip]
!
!
crypto ipsec transform-set vpnset esp-aes esp-sha-hmac
!
crypto map dti 10 ipsec-isakmp
set peer [router 2 public ip]
set transform-set vpnset
match address 175
!
!
!
!
!
interface GigabitEthernet0/0
description COX WAN2
ip address [router 1 public ip] 255.255.255.224
ip nat outside
ip virtual-reassembly in
ip tcp adjust-mss 1360
duplex auto
speed auto
crypto map dti
!
interface GigabitEthernet0/1
description LAN
ip address 192.168.168.35 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1360
duplex auto
speed auto
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list 101 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 [router 1 gateway]
ip route 10.0.0.0 255.255.255.0 GigabitEthernet0/0
!
access-list 101 deny ip 192.168.168.0 0.0.0.255 10.0.0.0 0.0.0.255
access-list 101 permit ip 192.168.168.0 0.0.0.255 any
access-list 175 permit ip 192.168.168.0 0.0.0.255 10.0.0.0 0.0.0.255
-------------------------------------------
router 2 - Satellite Office
crypto isakmp policy 10
encr 3des
authentication pre-share
group 5
crypto isakmp key vpnkey address [router 1 public ip]
!
!
crypto ipsec transform-set vpnset esp-aes esp-sha-hmac
!
crypto map dti 10 ipsec-isakmp
set peer [router 1 public ip]
set transform-set vpnset
match address 175
!
!
!
!
!
interface GigabitEthernet0/0
description external WAN interface
ip address [router 2 public ip] 255.255.255.252
ip nat outside
ip virtual-reassembly in
duplex full
speed 100
media-type rj45
no cdp enable
crypto map dti
!
interface GigabitEthernet0/1
description internal LAN interface
ip address 10.0.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
media-type rj45
no cdp enable
!
no ip classless
ip forward-protocol nd
!
!
no ip http server
ip http secure-server
ip nat inside source list 101 interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 [router 2 gateway]
ip route 192.168.168.0 255.255.255.0 GigabitEthernet0/0
!
access-list 101 deny ip 10.0.0.0 0.0.0.255 192.168.168.0 0.0.0.255
access-list 101 permit ip 10.0.0.0 0.0.0.255 any
access-list 175 permit ip 10.0.0.0 0.0.0.255 192.168.168.0 0.0.0.255
